Please do not open a public issue for security vulnerabilities.

Instead, report them privately via GitHub Security Advisories, or by email to leonid@svyatov.com.

You can expect an acknowledgement within 48 hours and an initial assessment within one week. We follow a coordinated-disclosure process and will credit reporters who wish to be acknowledged.